Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: Loh5zmpHH0va/pkbU1RhcBCxkia2v63Ghb6Vr/a8tfM=
Subject key identifier: 2D:50:7B:A4:8C:AC:DB:F4:38:A4:8A:26:E4:4E:B4:7A:B2:46:A1:35
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 01A18299AD4152AD151CA1D78C61D363ECE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: 02B8
Signing time: Wed 28 Oct 2026 13:01:11 +0000
Manifest this update: Wed 28 Oct 2026 13:01:11 +0000
Manifest next update: Thu 29 Oct 2026 13:01:11 +0000
Files and hashes: 1: V6kppHtIo247BBTH3uKp26adRoU.roa (hash: r9eyxABr1xQBoWx1fQ1XYssusw5T9eBOHoVdb80YKAw=)
2: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: sbe5BwPa3KMaedRv304lmm+xHeGFVcsLvuxRBO9opyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:ad:41:52:ad:15:1c:a1:d7:8c:61:d3:63:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Oct 28 13:01:11 2026 GMT
Not After : Oct 29 13:01:11 2026 GMT
Subject: CN=2d507ba48cacdbf438a48a26e44eb47ab246a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:41:a1:ba:62:42:4f:16:4c:d2:16:f4:8a:
c3:2b:45:4e:64:62:9f:2f:9e:e3:f0:f1:54:02:00:
93:af:ad:3e:a3:cf:b1:9b:1d:2b:3d:ab:34:ed:fd:
f7:0f:66:92:82:bd:b5:fc:51:58:ff:1f:d5:ba:0d:
9f:84:c5:3f:ba:fe:f6:c7:4f:2e:d9:92:5e:1e:be:
01:1c:03:a6:bd:fc:d0:c8:36:8e:9e:5b:89:fc:40:
31:fa:be:7f:f5:69:35:11:f3:52:ee:a3:d9:e9:5d:
4b:69:4b:d9:13:4c:6c:d9:aa:ce:3c:57:5a:e0:bb:
3a:18:5a:4c:c4:83:7f:49:f6:75:f7:16:4b:2a:f4:
ad:72:57:05:cb:04:c3:f8:2a:a3:e1:cd:95:8e:c4:
1c:10:d2:5b:11:f0:16:55:ff:83:71:9f:55:72:62:
83:a4:68:15:45:bd:c4:6b:76:05:bf:2f:04:1f:10:
31:59:ad:28:49:78:cf:ea:5d:3a:99:e2:1c:bf:3c:
cd:b5:6b:d0:05:36:7d:b0:f4:97:29:bf:57:cd:cf:
67:04:40:ed:64:3c:d1:19:89:c6:07:a2:b4:0c:3a:
d5:92:41:60:f1:b2:1c:4e:34:5b:f7:ca:0b:e2:21:
a3:aa:c3:ca:de:45:41:e8:a4:36:a1:b5:c7:81:8b:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:50:7B:A4:8C:AC:DB:F4:38:A4:8A:26:E4:4E:B4:7A:B2:46:A1:35
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ca:a6:3f:56:b3:9d:ac:a6:08:6d:dd:cf:67:da:38:3e:92:
fd:da:5a:31:a7:33:2d:c0:90:58:ba:88:f1:82:ba:d4:45:a2:
f4:66:a6:fa:d7:a1:79:9b:a3:92:ee:9b:0c:ef:26:f4:bb:9b:
27:97:4c:2f:6c:6f:5b:d1:ff:fc:16:de:ae:58:9b:93:c8:be:
0c:76:24:b8:17:d9:16:20:0c:4e:e8:ae:ee:21:97:fe:b6:87:
35:93:d6:eb:f4:a7:f1:19:6a:f4:4d:99:d7:86:d9:71:2f:87:
e1:1c:a9:8c:f0:41:90:f8:7c:28:36:dc:68:b0:be:7c:4c:5d:
3a:26:cb:60:6a:e3:13:b5:e0:fb:99:f2:e2:79:93:8f:39:80:
c3:6f:ae:06:b2:b9:fc:9e:43:1b:5d:88:10:21:c4:19:a7:36:
83:58:63:bd:c1:b4:0b:a9:a8:c1:6e:75:e6:36:c9:b4:dc:06:
ca:4f:ec:e2:2c:6a:b9:b4:cf:f6:63:1b:b6:48:5b:bd:00:bd:
75:ae:19:2b:e7:81:fc:cc:67:b8:ac:9b:27:32:a7:8a:c4:0f:
61:3d:37:91:f1:d1:e3:9a:1e:7f:e7:67:b3:b9:ee:9f:8f:79:
50:92:db:a0:24:b2:92:e4:9a:71:b1:70:97:5f:99:7e:0c:ba:
8b:a3:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:55:22 2026 by rpki-client